CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- suse manager, uyuni +1 moresusemanager installer creates world-readable swap files4.0 Medium
- vegadesign profiledesign cmsMultiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote...6.1 Medium
- mythemeshop launcherMultiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress...5.4 Medium
- lg gamp-7100 firmware, gapm-7200 firmware, gapm-8000 firmware +2 moreAn issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated...7.5 High
- simple better bankingThe Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was...6.6 Medium
- page flip book project flip bookDirectory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book...9.8 Critical
- d-link dir-822 firmwareIn the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the...9.8 Critical
- d-link dir-822 firmwareIn the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability...9.8 Critical
- d-link dir-868l firmwareIn the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable,...9.8 Critical
- d-link dir-818lw firmware, dir-822 firmware, dir-860l firmware +3 more +5 moreD-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2...9.8 Critical
- d-link dir-818lw firmware, dir-822 firmware +1 moreIn the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the...9.8 Critical
- polycom group series, hdx, pano +2 moreAn issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and...9.8 Critical
- mycolorway simditorCross-Site Scripting in simditor6.1 Medium
- remarkable project remarkableCross-site Scripting in remarkable6.1 Medium
- kieranoshea calendarThe Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title...5.4 Medium
- evernoteEvernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can...6.1 Medium
- getkirby kirbyKirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the...4.8 Medium
- getkirby kirbypanel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page.5.4 Medium
- typesettercms typesetterindex.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT...4.8 Medium
- typesettercms typesetterindex.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name.4.8 Medium
- typesettercms typesetterTypesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation.5.4 Medium
- espressif esp-idfAn issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1....6.4 Medium
- xerox colorqube 8580 firmwareCross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote...6.1 Medium
- seagate nas osCross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers...6.1 Medium
- seagate nas osCross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to...5.4 Medium
- seagate nas osMissing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application...6.1 Medium
- seagate nas osUnvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access...7.5 High
- seagate nas osArbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to...6.1 Medium
- seagate nas osCross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to...5.4 Medium
- seagate nas osDirectory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files...7.5 High
- seagate nas osCross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to...6.1 Medium
- seagate nas osInsufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS...7.5 High
- seagate nas osSQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to...9.8 Critical
- asus rt-ac3200 firmwareSystem command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows...9.8 Critical
- asus rt-ac3200 firmwareFormat string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows...8.1 High
- asus rt-ac3200 firmwareBuffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to...6.5 Medium
- asus rt-ac3200 firmwareMissing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382...6.5 Medium
- asus rt-ac3200 firmwareCross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers...6.1 Medium
- virginmedia hub 3.0 firmwareOn Virgin Media wireless router 3.0 hub devices, the web interface is vulnerable to denial of...7.5 High
- remarkable project remarkableRegular Expression Denial of Service in remarkable7.5 High
- golang goGo through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction...9.8 Critical
- magazine3 amp for wpampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.5.4 Medium
- yellowpencil visual css style editorThe WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before...8.8 High
cups-filtersDebiancups-filters - regression updateNo score- eye-disk eyediskeyeDisk implements the unlock feature by sending a cleartext password. The password can be...6.8 Medium
- harpjs harpUnauthorized File Access in harp5.3 Medium
- harpjs harpUnauthorized File Access in harp5.3 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual...5.9 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in...5.5 Medium
- nvidia gpu display driver, geforce experience +1 moreNVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in...6.7 Medium
- Show moreLoading…